Privacy Policy

Effective September 29, 2026 · Applies to the Car Log app on iOS and Android (Google Play) and this website.

Who we are

Car Log is made by Camellia Studios LLC, 5830 E 2nd St, Ste 7000 #25591, Casper, WY 82609, USA (“we,” “us”). For anything in this policy, reach us at support@camellia.studio.

Your vehicle data

Everything you log — vehicles, VINs, odometer readings, fuel entries, services, reminders, notes, photos and receipts — is stored in a local database on your device. Nothing you log is ever transmitted to us. How it's backed up depends on your platform:

• iPhone: Car Log automatically copies a versioned backup, photos included, into your iCloud, so you can restore after a reinstall or on a new phone. That backup is inside your personal iCloud storage, governed by your Apple ID and Apple's iCloud terms; we cannot access it.
• Android: Car Log relies on Android Auto Backup, Google's system backup of app data to your Google account. When device backup is turned on, Android periodically copies the app's data — your records database and the app's settings, including the anonymous analytics and purchase identifiers described below — to your Google account, and restores it when you reinstall Car Log or set up a new device. Vehicle photos and receipt photos are left out of that cloud backup, because Android limits each app's backup to 25 MB and skips it entirely above that; they stay on your phone and move with a device-to-device transfer (Android 12 and later). That backup is governed by your Google account and Google's privacy policy; we never see or receive it. Car Log's Settings warns you if your records ever approach the limit.

You can export all of your data as CSV at any time, free, from Settings — through the share sheet, or on Android saved straight to your device (the Downloads folder on Android 10 and later, or a folder you pick on older versions). The file goes only where you send it. To remove every copy you hold, delete the app and delete its backup: on iPhone, remove Car Log's data from your iCloud storage settings; on Android, delete the app's backup through your device's backup settings or your Google account.

What we do collect

Anonymous usage analytics

The app sends anonymous usage events (for example: app opened, first entry created, import completed, paywall viewed) to PostHog, our analytics provider. These events describe that a feature was used, tied to a random identifier the app creates on install — not who you are, and not the contents of your log. Each event also carries basic technical details: the platform and operating-system version, device manufacturer and model, app version, language setting, time zone, and screen size. We use them to understand what's working and what isn't, on each platform.

Crash reports

If the app hits an unexpected error, it may send a crash report to PostHog with the error type, error message, and the code location where it occurred, alongside the same anonymous identifier and technical details. Crash reports help us find and fix bugs; they aren't designed to include what you've logged.

Feature requests

If you submit a feature request in Settings, the title and details you write, the category you pick, and your app version are sent to us (via the same analytics channel) so we can read and respond to it. Don't include personal information you wouldn't want us to see.

Purchases

Purchases are processed by Apple on iPhone and by Google Play Billing on Android; we never see your payment details. We use RevenueCat to validate purchase receipts and know which features to unlock, keyed to a random identifier. We link that purchase record to the same anonymous analytics identifier so we can measure trials, purchases, and renewals. See RevenueCat's privacy policy.

VIN lookup

If you enter a VIN when adding a vehicle, the app sends that VIN directly from your device to the U.S. National Highway Traffic Safety Administration's free vPIC decoding service to fill in the year, make, and model. It doesn't pass through us, and we only learn that a decode happened, never the VIN itself. NHTSA's handling of the request is governed by its own privacy policy.

Remote configuration

The app periodically fetches lightweight configuration (such as feature-request responses and minimum-version notices). These are downloads only — they carry no personal data upstream beyond the anonymous analytics identifier.

This website

This site uses PostHog for basic, privacy-respecting visit analytics (pages viewed, store link clicks). No advertising trackers, no cross-site tracking.

Device permissions

Car Log asks only for what a feature needs, when you use it:

• Camera — to take a photo of a vehicle or a receipt. Only requested when you choose to take one.
• Photos — to attach an existing picture. Car Log opens the system photo picker, so it receives only the pictures you choose; on Android it never asks for access to your photo library.
• Notifications — for the service reminders you set up. Reminders are scheduled on your device, not sent from a server; on Android the app also restores them after your phone restarts.

On Android the app also holds standard permissions that never prompt you, such as internet access and Google Play Billing. On Android 9 and older, a legacy storage permission is declared by the file and photo components the app is built on; Car Log never asks for it and saves exports through the system folder picker instead. Car Log doesn't request location, contacts, or microphone access, and on Android it doesn't use the Advertising ID.

What we never do

• No accounts, passwords, or profiles.
• No selling your data, and no sharing it for advertising of any kind.
• No advertising identifiers and no location tracking.
• No reading your log contents — vehicles, entries, notes, and photos stay with you.

When we would disclose information

We don't share the little data we hold with anyone except the service providers named above (PostHog, RevenueCat), who process it on our behalf and can't use it for their own purposes. Beyond that, there are two situations where disclosure could happen:

• Legal requirements. If we are required to by law — a subpoena, court order, or similar legal process — we may disclose what we hold.
• Business transfer. If Camellia Studios LLC or the Car Log app is acquired or merged, the data described in this policy may transfer with it. The new owner would be bound by this policy, and we'd post a notice here about any change of ownership.

Where processing happens

Your vehicle data stays on your device and in your own iCloud or Google account backup. The analytics, crash-report, and purchase data described above is processed on servers in the United States by PostHog and RevenueCat. If you use Car Log from the EEA, UK, or Switzerland, that data is transferred to the US under appropriate safeguards, including Standard Contractual Clauses in our agreements with those providers.

How long we keep things

• Your vehicle data: on your device and in your iCloud or Google account backup until you delete it — we never have it, so there's nothing for us to retain.
• Anonymous analytics and crash reports (PostHog): retained only as long as needed to understand how the app is used and to fix bugs. Because these events aren't tied to your identity, we generally can't single out and delete an individual's events, but we periodically review and delete analytics data we no longer need.
• Feature requests: until we've addressed them, at most 2 years.
• Purchase records (RevenueCat): for as long as your purchase or subscription entitles you to Pro, plus a reasonable period for record-keeping.
• Support email: for as long as needed to help you and keep a record of the conversation.

Security

The little data that leaves your device travels over encrypted connections (TLS). Everything else is protected by your device's built-in protections and the security of your iCloud or Google account. No system is perfectly secure, but if a breach of data we hold ever affects you, we will notify you as required by applicable law.

Support email

If you email support@camellia.studio, we keep the correspondence so we can help you. We don't add you to any mailing list.

Children

Car Log is not directed at children under 13, and we don't knowingly collect data from them.

Data deletion

Your records: delete the app and its backup (on iPhone, Car Log's data in your iCloud storage; on Android, the app's backup in your Google account). Analytics and crash reports: email us and we'll delete events tied to your device identifier (Settings shows it under Privacy).

Your U.S. state privacy rights

If you live in California or another U.S. state with a consumer privacy law, you have the right to know what personal information we collect (it's all listed above), to request its deletion or correction, and to not be discriminated against for exercising those rights. We do not sell personal information and do not share it for cross-context behavioral advertising — so there is nothing to opt out of, and browser signals like Global Privacy Control are honored by default.

To exercise any of these rights, email support@camellia.studio. Because we hold no account tied to your name, we'll verify your request against the anonymous device identifier shown in the app's Privacy settings. We respond within 45 days.

Do Not Track & Global Privacy Control

We don't track you across other apps or websites, so there's nothing for a Do Not Track or Global Privacy Control signal to switch off — the app and this site already behave the way those signals ask.

Your rights in the EEA & UK

If you're in the European Economic Area, the United Kingdom, or Switzerland, the GDPR (and UK GDPR) apply. Our legal bases are: legitimate interests for anonymous usage analytics and crash reports, performance of a contract for purchase validation and remote configuration, and consent for anything you voluntarily send us, like feature requests (which you can withdraw at any time).

You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Email support@camellia.studio and we'll respond within one month. You also have the right to lodge a complaint with your local supervisory authority — though we'd appreciate the chance to resolve your concern first.

Changes

If this policy changes materially, we'll update this page. The effective date above always reflects the current version.

Contact

Camellia Studios LLC · 5830 E 2nd St, Ste 7000 #25591, Casper, WY 82609, USA · support@camellia.studio